In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

1
vote
2answers
81 views

Access virtual box on remote server

I have a remote server (ubuntu) with 1 public IP. I've installed headless VirtualBox and deployed machine. For now I can access it by VirtualBox's VRDE Server running on server, but what i need is ...
0
votes
0answers
220 views

Mikrotik NAT accross IPSEC tunnel

Im trying to perform a NAT to a server that is across a ipsec tunnel. Both routers are Mikrotik Internet-----public IP=======Ipsec=====LAN---Web server Right now the two routers communicate by the ...
0
votes
1answer
87 views

RRAS NAT Monitoring

I was wondering if I could monitor my RRAS (VPN) users TCP connection.I don't want to sniff data, however I need to log TCP port numbers and timestamps as well as corresponding users and local ...
9
votes
3answers
2k views

Exposing multiple servers behind NAT using a single public IP address

This is a Canonical Question about NAT and DNS I'm currently trying to set up a network with a DMZ containing a web server and an e-mail server separated from the Internet by a network address ...
-1
votes
1answer
160 views

iptables NAT Forward 443 Port DNAT,SNAT failing

I'm trying to setup a proxy server that handles http and forwards https to the webserver. Client > Proxy > httpd I added the rules: iptables -t nat -I PREROUTING -i eth1 -p tcp -m tcp --dport ...
1
vote
3answers
645 views

Make CentOS 6.x a port forwarding NAT device

I would like to make CentOS a port forwarding NAT machine using iptables. This is the first time I've tried this and I think i might need a little help. This is the configuration i'm trying to ...
0
votes
1answer
1k views

Routing traffic through IPSec with NAT and IP Alias in pfSense

I have a pfSense firewall and I need to connect to a remote site (form my client). I'm running into several issues, and don't see traffic flowing in any way. Here's my setup: LAN is 192.168.0.0/16 ...
0
votes
1answer
54 views

Natting / Port forwarding in cisco FWSM

I have requirement to PAT two different public IP [same port] to single load balancer local IP [VIP] in different ports using a Cisco FWSM. Ex: static(LB,outside) 10.0.0.1 www 192.168.100.1 8282 ...
1
vote
0answers
58 views

Linux iptables NAT

So I need to setup a server that servers a NAT server for IPMI network xxx.xxx.xxx.xxx = external IP(internet IP) aaa.aaa.aaa.aaa = internal IP A bbb.bbb.bbb.bbb = internal IP B User 1 -> ...
0
votes
0answers
66 views

iptables, multiple services mapped to the same port, routing by hostname

I have a service running on port 25565, and another on 25560. The former can be reached using example.domain.tld, the latter with example2.domain.tld:25560 So I ask if there is a way, using ip ...
2
votes
2answers
57 views

Cisco Network Object NAT to get Internet?

So I've inherited a Cisco ASA 5505, and I have no experience whatsoever with the things! There are two Network Interfaces both WAN facing, and the LAN interface of course. Now in NAT rules, there are ...
0
votes
0answers
68 views

Cisco ASA-5505 port forwarding UDP 10000

When I try to portforward UDP 10000 using the following command via ASDM: static (inside,outside) udp interface 10000 192.168.0.141 10000 netmask 255.255.255.255 tcp 0 0 udp 0 I get the following ...
0
votes
0answers
360 views

Cisco 1921 - Using NAT (NVI method) between VRF's slow performance

I'm setting up a Cisco 1921 with two VRF's: one to the internet and one to the LAN. The LAN is in private address space so source address translation needs to happen when the packets leave the ...
0
votes
2answers
440 views

Cisco ASA-5505 Port Forwarding

I have a Cisco ASA-5505 firewall, which is currently configured to share our internet connection and do NAT for my LAN, as well as forward port 443 to an internal machine. I need to forward port 2222 ...
0
votes
1answer
385 views

ASA 5510 8.4 Nat & Portforwarding

So I'm trying to forward an internal service on a internal server to the external interface on the same port on the outside interface of our ASA. I been searching for a solution for days and found ...
2
votes
1answer
399 views

How to set mark on packet when forwarding it in nat prerouting table?

I have a few port forward rules like this iptables -t nat -A PREROUTING -p tcp --dport 46000 -j DNAT --to-destination 172.16.8.2:46000 iptables -A FORWARD -p tcp -d 172.16.8.2 --dport 46000 -j ACCEPT ...
0
votes
0answers
106 views

Why NATted packets have different source ip addresses?

I've got ubuntu box with nat. Here is the problem: root@office.redhelper.ru:~# tcpdump -i tap0 host 194.190.8.141 -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode ...
5
votes
2answers
795 views

How do I route a public IP range over an IPSEC VPN?

So, I have an established IPSec Site to Site tunnel. Site A has a SonicWall, Site B has a EdgeRouter. The first tunnel consists of Site A's NATed ips to Site B's NATed ips. Everything works as ...
0
votes
1answer
141 views

ipsec (openswan) routing or dns issue with iphone

I got an established VPN connection, but either the routing or the resolving is not working. The configuration is taken from ...
0
votes
1answer
121 views

Configuring routing for network faults simulator

I'm trying to configure routing on my test machine to pass all traffic via the network errors simulator (WANem). WANem runs in a virtual machine, in the same network with internet gateway. It has NAT ...
-1
votes
2answers
191 views

limit ip Masquerade to certain ip range

I'm using the entire 10.0.0.0/8 subnet on the private side. I want to allow a certain section of the subnet (say 10.0.0.2 - 10.0.31.254) to access the internet via linux router but not the rest of ...
0
votes
1answer
272 views

Running iptables NAT prerouting on second eth interface with different subnet

The situation: I need clients to be able to hit an HTTP server running on eth1 interface on a Linux box on port 8080. I don't want the clients to have to do anything special and I don't want to give ...
4
votes
2answers
639 views

NAT routing and port forwarding on Cisco ASA 5505

I have inherited my first Cisco router and am having trouble understanding how to do NAT port forwarding correctly. ASA: 8.0.2 ASDM: 6.1(1) I have a single external ip address on the outside (via ...
1
vote
1answer
119 views

Configure VirtualBox webserver to see visitors IP address

I finally managed to move my server to VirtualBox virtual machine. VM is running in NAT mode. I have forwarded necessary ports, including the port 80 which I first fowarded with iptables to port ...
0
votes
0answers
147 views

Racoon IPSec between 2 networks - wrong routing in one direction. How to debug/fix?

I am trying to connect a VPN router (situated behind an NAT router) to a linux server (firewall, public ip) via IPSec. The linux server uses racoon. The VPN connection seems to be up and running, ...
0
votes
1answer
113 views

How to redirect a packet to localhost in pf?

I am trying to redirect packets that are going to internal network to localhost of firewall. I wrote this rule but it doesn't work. int_net = "{10.0.0.0/24}" ext_if = "{igb0}" int_if = "{igb1}" rdr ...
0
votes
0answers
37 views

Is it possible to use a different NAT configuation on a Juniper SG 140 for inbound vs outbound traffic?

I will apologize up front if I'm using the wrong terminology on how to describe what I need here. I don't have a lot of network routing experience. I've found examples of setting up 1-to-1 NAT ...
1
vote
0answers
127 views

OpenStack Server Instances have internet access, but they are unable to access the internal network

I'm running an OpenStack Grizzly release with a Nova-Network configuration. [No Quantium]. My network is setup as follows: OpenStack Box (10.10.13.xx network)->OpenStack Internal Network ...
1
vote
1answer
235 views

Can you configure SNAT with multiple source IP's and use static DNAT (port forwarding)?

We have a private LAN connected to a firewall with multiple public IP's to use for SNAT in order not to overload the ports on a single IP. However, we have a requirement to allow certain workstations ...
-1
votes
3answers
63 views

Set static IP to a server behind the NAT [closed]

In my company, we just bought a server and now we want to set a static IP to it. Well, I've contacted my ISP and they said that they can give me static IP. So far, so good. My question is, where ...
17
votes
7answers
1k views

Why don't more organizations use inside-to-inside NAT or similar solutions to allow NAT hairpins?

Inside-to-inside NAT aka NAT loopback solves hairpin NAT issues when accessing a web server on the external interface of an ASA or similar device from computers on the internal interface. This ...
0
votes
0answers
232 views

Mikrotik: best way to bypass NAT by dst-address?

I tried the solution from http://forum.mikrotik.com/viewtopic.php?f=2&t=14247&p=368912 but CPU load does not decrease, so it seems that conntracking and other CPU intensive things are still ...
1
vote
1answer
24 views

destinantion-based NAT cisco routers

On a Cisco Router I need to translate "NAT" the LAN IP of some PCs based on the destination e.g. Connecting to 172.16.0.0 /24 Transalte to 172.16.0.100 Connecting to 0.0.0.0 0.0.0.0 Translate to ...
1
vote
1answer
160 views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
0
votes
0answers
450 views

Sonicwall NAT Policy Pritory Ordering not working

I understand that the priorities of the NAT Policies for a Sonciwall UTM device (we have an NSA 3500) are automatically assigned - a couple of quotes below from the Admin manual makes that clear "By ...
-2
votes
2answers
70 views

Do I need 2 NIC cards to forward public IP to private IP? [closed]

To use NAT do I need 2 nic cards? I want to use my server for my own business (I don't require VPN) and simply need to forward my public IP to the private IP so that websites show up as ...
0
votes
0answers
56 views

Loosing gateway setting when switching Hyper-V virtual lan to “external”

I have a 2008 R2 server running as a NAT-Router and Hyper-V Host. NIC1 has the default gateway set to NIC2. Using this setup everthing works and all clients can connect to the internet. If I'm ...
0
votes
0answers
57 views

Bandwidth Management & Visibility at Network Border w/ Multiple WAN Links

There is a network that is designed as described below: The ISP supplies a single physical link with 4 VLANs running to us through that link. Each VLAN has a specific purpose, 3 of the VLANs will ...
1
vote
0answers
253 views

Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access) - SOLVED

I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output: puppet agent --debug --no-daemonize ...
0
votes
1answer
398 views

pfense needs to be rebooted to effect a change in existing NAT

Using PFSense ver:2.0-RC1 (i386) When changing an existing NAT rule in pfsense I find that the rule doesn't work when: 1. the rule existed but with a change to its port number or destination LAN ip ...
7
votes
1answer
173 views

FreeBSD's ng_nat stopping pass the packets periodically

I have FreeBSD router: #uname 9.1-STABLE FreeBSD 9.1-STABLE #0: Fri Jan 18 16:20:47 YEKT 2013 It's a powerful computer with a lot of memory #top -S last pid: 45076; load averages: 1.54, 1.46, ...
6
votes
1answer
217 views

How do I configure NAT rules when using ASA IP-SLA when leveraging post-ASA-8.3 NAT syntax?

We are currently running ASA9 at a location with redundant ip connectivity. We'd love to configure ip sla so that internet access survives a single carrier outage. I'm aware of the ip sla commands, ...
0
votes
0answers
86 views

set DMZ server on modem that not support DMZ, using port forwarding

I have to see an application server from outside of my network, but the modem that I am using is a Zyxel P-660-HN-T1H that not supports DMZ server configuration.So, which port(s) I should forward to ...
0
votes
2answers
218 views

DSL routing - NAT Virtual server - port forwarding - static ip address [closed]

My NAT virtual server - port forwarding has been working fine up to the past couple of weeks. All in a sudden, it doesn't work. Setting was done as shown on the link: I'm afraid it no longer ...
1
vote
0answers
262 views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
0
votes
1answer
1k views

install iptables_nat module on centos 6.4 [duplicate]

I am trying to add the following rule: iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080 but what I am getting is: FATAL: Module ip_tables not found. iptables ...
1
vote
1answer
162 views

Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs

I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN. I set up iptables in order to redirect all the web traffic coming by the LAN into a ...
1
vote
1answer
188 views

Provide public access to a local web server through VPN

I have a VPN tunnel established between 2 servers: VPS-A and VPS-B having the (fictional) public IP addresses: 66.55.44.33 and 77.88.55.66, and VPN endpoints 10.0.1.1 and 10.0.2.1 respectively. There ...
1
vote
1answer
276 views

iptables can drop traffic but cannot redirect

Suppose that TCP packets are sent to destination ip (dest_ip) and can be dropped by the following command: iptables -A INPUT -d dest_ip -p tcp -j DROP But when I try to redirect the packet using ...
0
votes
1answer
373 views

How to send HTTP request issued by cURL through VPN?

Please excuse me for (probably) the noob question, but I am very new to Linux networking. I've already spent a few days searching the Internet for an answer to my question, but was unable to find one, ...